This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json) Hash identifier: 5SxGPovHbJyIjodBq4efFe7EAeju4HPe0FnwXyi8KJ8= Subject key identifier: 94:E5:29:BA:04:52:47:AC:10:09:CB:E9:31:44:24:CC:3D:3B:00:95 Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3 Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3 Certificate serial: 019B39EA9563B0A3DC876B98295CA2775F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 04:00:33 +0000 Manifest this update: Sat 20 Dec 2025 04:00:33 +0000 Manifest next update: Sun 21 Dec 2025 04:00:33 +0000 Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=) 2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: ATTLgUdZZPNJoAO6QI+MVNit3SW+2Zt0Ebulg4ZAsAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:95:63:b0:a3:dc:87:6b:98:29:5c:a2:77:5f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3 Validity Not Before: Dec 20 04:00:33 2025 GMT Not After : Dec 21 04:00:33 2025 GMT Subject: CN=94e529ba045247ac1009cbe9314424cc3d3b0095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:cd:24:b9:84:67:a1:8b:a4:70:de:79:13: 87:ef:39:5b:be:11:f1:88:b1:5e:57:74:34:86:f9: fa:75:57:7a:8e:8b:ff:6c:4d:17:86:8e:8c:a4:5c: 6d:21:d4:fe:87:0d:16:24:e2:28:6b:3f:18:d7:d1: ea:86:71:05:14:06:62:bf:45:86:03:bb:5b:e0:d0: 37:21:dc:fe:29:24:b8:de:dc:a6:b0:d0:04:32:07: 1e:f8:e9:ea:52:ed:27:68:4d:0d:28:c5:e8:6f:6a: 64:e3:ad:eb:39:18:0c:87:4c:48:8c:dc:89:10:ff: 1c:6d:c1:15:50:77:50:37:13:5c:58:17:f8:bc:8c: be:83:cc:c6:f2:1c:98:06:fd:0e:be:55:76:14:79: e6:60:12:fa:06:3d:e8:57:3d:10:64:04:98:b1:58: 34:89:54:c3:70:d4:fb:09:06:fe:9a:8a:7f:8c:40: b7:8a:ed:1b:85:ec:e0:a4:22:69:80:b1:86:ae:9a: 6a:99:52:7d:5d:72:00:18:1e:4d:f9:bd:74:2f:6f: c9:7d:5a:4b:29:da:31:8d:ea:30:57:aa:c7:55:3a: eb:0d:05:3c:ae:1e:16:37:52:c9:59:ed:89:e6:89: 4f:7b:1a:77:8b:61:ef:9b:71:4e:78:63:04:38:d5: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E5:29:BA:04:52:47:AC:10:09:CB:E9:31:44:24:CC:3D:3B:00:95 X509v3 Authority Key Identifier: keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5e:55:64:d5:46:f6:0d:c1:1f:c7:10:3a:00:76:b3:92:e4: 9c:8b:ef:b5:e0:ee:38:a8:2e:a6:96:64:f2:1d:4f:5f:28:0b: cd:d7:9b:de:6a:c3:80:2c:bd:53:6e:f4:8c:b3:59:71:42:65: fc:e1:e8:ed:bb:3d:8c:0e:f2:61:22:4e:40:8c:e6:2e:4b:22: b2:3f:bf:db:00:8a:d5:41:8d:8f:7e:80:25:70:90:21:1a:3d: 7e:c2:41:5d:bc:d1:2b:5a:c2:b3:81:98:b8:0d:1d:63:50:38: ce:d9:c5:10:a7:15:ab:b7:be:64:07:71:82:fc:e3:80:ba:65: b3:81:a8:7b:b6:f1:46:f1:4f:b0:02:63:11:a6:c9:6b:d1:57: b9:27:48:79:9b:87:41:6b:e1:a9:78:d0:ba:9e:b3:c4:0e:42: 23:68:67:06:dc:c4:04:19:9e:be:f2:3e:47:2b:6a:80:61:2f: 29:3b:1b:7e:2c:9f:a9:ea:1e:6a:26:b4:76:cf:d3:6d:74:16: ff:9d:f0:c0:d5:b0:a6:45:68:8a:96:8b:26:88:6a:76:c1:78: 66:fe:27:39:a1:eb:cb:ed:be:42:ac:9c:5c:58:07:42:4d:1c: 58:fb:0b:7c:68:04:d8:d1:68:77:c4:38:b4:63:9a:31:cf:5d: 2c:a1:aa:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56pVjsKPch2uYKVyid190MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MjhiNzFmMWU3Y2E2OTUzMWRkNWRmMjU1OTUxMzU5OGRi MWM3ZjMwHhcNMjUxMjIwMDQwMDMzWhcNMjUxMjIxMDQwMDMzWjAzMTEwLwYDVQQD Eyg5NGU1MjliYTA0NTI0N2FjMTAwOWNiZTkzMTQ0MjRjYzNkM2IwMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i3NJLmEZ6GLpHDeeROH7zlbvhHx iLFeV3Q0hvn6dVd6jov/bE0Xho6MpFxtIdT+hw0WJOIoaz8Y19HqhnEFFAZiv0WG A7tb4NA3Idz+KSS43tymsNAEMgce+OnqUu0naE0NKMXob2pk463rORgMh0xIjNyJ EP8cbcEVUHdQNxNcWBf4vIy+g8zG8hyYBv0OvlV2FHnmYBL6Bj3oVz0QZASYsVg0 iVTDcNT7CQb+mop/jEC3iu0bhezgpCJpgLGGrppqmVJ9XXIAGB5N+b10L2/JfVpL KdoxjeowV6rHVTrrDQU8rh4WN1LJWe2J5olPexp3i2Hvm3FOeGMEONUbwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTlKboEUkesEAnL6TFEJMw9OwCVMB8GA1UdIwQY MBaAFCUotx8efKaVMd1d8lWVE1mNscfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTkt ZWQzMmM1NjEyODQwLzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTktZWQzMmM1NjEyODQw LzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV5VZNVG 9g3BH8cQOgB2s5LknIvvteDuOKguppZk8h1PXygLzdeb3mrDgCy9U270jLNZcUJl /OHo7bs9jA7yYSJOQIzmLksisj+/2wCK1UGNj36AJXCQIRo9fsJBXbzRK1rCs4GY uA0dY1A4ztnFEKcVq7e+ZAdxgvzjgLpls4Goe7bxRvFPsAJjEabJa9FXuSdIeZuH QWvhqXjQup6zxA5CI2hnBtzEBBmevvI+RytqgGEvKTsbfiyfqeoeaia0ds/TbXQW /53wwNWwpkVoipaLJohqdsF4Zv4nOaHry+2+QqycXFgHQk0cWPsLfGgE2NFod8Q4 tGOaMc9dLKGqVw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:00 2025 by rpki-client